Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 04:59:10.214 00:00:11.244 TCP 23.104.0.1:43390 -> 1.101.0.1:3000 15 1926 1 2025-11-01 04:59:06.964 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:52380 14 10473 1 2025-11-01 04:54:53.940 00:05:56.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 04:54:53.938 00:05:56.621 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 05:00:11.498 00:00:10.370 TCP 23.104.0.1:35186 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:00:07.227 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55506 10 6452 1 2025-11-01 05:00:59.044 00:00:00.048 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 05:00:59.100 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:01:07.438 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50980 10 6452 1 2025-11-01 05:01:11.915 00:00:10.333 TCP 23.104.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:02:07.654 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47124 10 6452 1 2025-11-01 05:02:12.283 00:00:10.333 TCP 23.104.0.1:34920 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:03:07.869 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56802 10 6452 1 2025-11-01 05:03:12.652 00:00:10.364 TCP 23.104.0.1:53090 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:04:08.087 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48556 10 6452 1 2025-11-01 05:04:13.064 00:00:10.390 TCP 23.104.0.1:50922 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:05:08.312 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52116 10 6452 1 2025-11-01 05:05:13.475 00:00:10.367 TCP 23.104.0.1:37670 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:00:53.939 00:05:56.622 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 05:00:53.942 00:05:56.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 05:05:59.341 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 05:05:59.374 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:06:08.521 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51114 10 6452 1 2025-11-01 05:06:13.876 00:00:10.388 TCP 23.104.0.1:53892 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:07:08.700 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59002 10 6452 1 2025-11-01 05:07:14.304 00:00:10.365 TCP 23.104.0.1:41336 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:08:08.913 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:45922 10 6452 1 2025-11-01 05:08:14.705 00:00:10.323 TCP 23.104.0.1:32914 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:09:09.108 00:00:13.866 TCP 1.101.0.1:3000 -> 22.102.0.1:60884 10 6452 1 2025-11-01 05:09:15.092 00:00:10.367 TCP 23.104.0.1:52542 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:10:13.009 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57012 10 6452 1 2025-11-01 05:10:15.500 00:00:10.364 TCP 23.104.0.1:56388 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:10:59.518 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:10:59.485 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 05:11:13.238 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58932 10 6452 1 2025-11-01 05:11:15.898 00:00:10.371 TCP 23.104.0.1:51112 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:06:53.944 00:05:56.621 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 05:06:53.947 00:05:56.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 05:12:13.471 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42822 10 6452 1 2025-11-01 05:12:16.308 00:00:10.368 TCP 23.104.0.1:33044 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:13:13.680 00:00:10.929 TCP 1.101.0.1:3000 -> 22.102.0.1:59778 10 6452 1 2025-11-01 05:13:16.714 00:00:10.372 TCP 23.104.0.1:43186 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:14:14.654 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42122 10 6452 1 2025-11-01 05:14:17.124 00:00:10.370 TCP 23.104.0.1:59112 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:15:14.884 00:00:10.302 TCP 1.101.0.1:3000 -> 22.102.0.1:34534 13 6608 1 2025-11-01 05:15:17.531 00:00:10.321 TCP 23.104.0.1:35078 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:15:59.486 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:15:59.520 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 05:16:15.231 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51414 10 6452 1 2025-11-01 05:16:17.894 00:00:10.379 TCP 23.104.0.1:54794 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:17:15.440 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49506 10 6452 1 2025-11-01 05:17:18.312 00:00:10.363 TCP 23.104.0.1:59388 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:12:53.948 00:05:56.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 05:12:53.945 00:05:56.626 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 05:18:15.651 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50424 10 6452 1 2025-11-01 05:18:18.719 00:00:10.373 TCP 23.104.0.1:44308 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:19:15.868 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45672 10 6452 1 2025-11-01 05:19:19.143 00:00:10.363 TCP 23.104.0.1:44654 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:20:16.092 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45800 10 6452 1 2025-11-01 05:20:19.544 00:00:10.328 TCP 23.104.0.1:53804 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:20:59.799 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:20:59.625 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 05:21:16.306 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:57810 10 6452 1 2025-11-01 05:21:19.912 00:00:10.367 TCP 23.104.0.1:58730 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:22:16.514 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56332 10 6452 1 2025-11-01 05:22:20.313 00:00:10.366 TCP 23.104.0.1:46628 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:23:16.691 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36502 10 6452 1 2025-11-01 05:23:20.715 00:00:10.370 TCP 23.104.0.1:52594 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:18:53.948 00:05:56.622 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 05:18:53.946 00:05:56.627 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 05:24:16.905 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49760 10 6452 1 2025-11-01 05:24:21.123 00:00:10.365 TCP 23.104.0.1:54804 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:25:21.525 00:00:10.416 TCP 23.104.0.1:36792 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:25:17.121 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45968 10 6452 1 2025-11-01 05:25:59.774 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 05:26:00.049 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:26:17.343 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49618 10 6452 1 2025-11-01 05:26:21.977 00:00:10.378 TCP 23.104.0.1:56678 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:27:17.551 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33328 10 6452 1 2025-11-01 05:27:22.395 00:00:10.361 TCP 23.104.0.1:52534 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:28:17.767 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45794 10 6452 1 2025-11-01 05:28:22.797 00:00:10.330 TCP 23.104.0.1:44088 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:29:17.987 00:00:17.837 TCP 1.101.0.1:3000 -> 22.102.0.1:52500 10 6452 1 2025-11-01 05:29:23.173 00:00:12.744 TCP 23.104.0.1:47432 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:24:53.955 00:05:56.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 05:24:53.953 00:05:56.623 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 05:30:25.970 00:00:10.377 TCP 23.104.0.1:56654 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:30:25.873 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45204 10 6452 1 2025-11-01 05:30:59.881 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:31:00.105 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 05:31:26.074 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44532 10 6452 1 2025-11-01 05:31:26.384 00:00:10.368 TCP 23.104.0.1:38458 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:32:26.298 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58010 10 6452 1 2025-11-01 05:32:26.789 00:00:10.367 TCP 23.104.0.1:41298 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:33:26.516 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59952 10 6452 1 2025-11-01 05:33:27.198 00:00:10.370 TCP 23.104.0.1:51390 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:34:26.732 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57670 10 6452 1 2025-11-01 05:34:27.605 00:00:10.399 TCP 23.104.0.1:41336 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:35:26.955 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55804 10 6452 1 2025-11-01 05:35:28.043 00:00:10.325 TCP 23.104.0.1:37622 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:30:53.956 00:05:56.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 05:30:53.955 00:05:56.622 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 05:36:00.085 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 05:36:00.167 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:36:28.407 00:00:10.327 TCP 23.104.0.1:57236 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:36:27.187 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53856 10 6452 1 2025-11-01 05:37:27.401 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53738 12 6556 1 2025-11-01 05:37:28.773 00:00:10.370 TCP 23.104.0.1:56994 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:38:27.623 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:55738 10 6452 1 2025-11-01 05:38:29.182 00:00:10.365 TCP 23.104.0.1:49650 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:39:29.592 00:00:10.381 TCP 23.104.0.1:50242 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:39:27.840 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43496 10 6452 1 2025-11-01 05:40:30.029 00:00:10.366 TCP 23.104.0.1:60172 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:40:28.079 00:00:10.397 TCP 1.101.0.1:3000 -> 22.102.0.1:59354 10 6452 1 2025-11-01 05:41:00.013 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 05:40:59.993 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:41:28.516 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60742 10 6452 1 2025-11-01 05:41:30.435 00:00:10.374 TCP 23.104.0.1:53516 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:36:53.958 00:05:56.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 05:36:53.955 00:05:56.622 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 05:42:28.740 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46362 10 6452 1 2025-11-01 05:42:30.855 00:00:10.341 TCP 23.104.0.1:53144 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:43:31.230 00:00:10.326 TCP 23.104.0.1:53148 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:43:28.965 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:48354 10 6452 1 2025-11-01 05:44:29.149 00:00:10.802 TCP 1.101.0.1:3000 -> 22.102.0.1:43130 12 10369 1 2025-11-01 05:44:31.593 00:00:11.668 TCP 23.104.0.1:34314 -> 1.101.0.1:3000 15 1926 1 2025-11-01 05:45:29.989 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:48936 10 6452 1 2025-11-01 05:45:33.297 00:00:10.369 TCP 23.104.0.1:39838 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:45:59.857 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 05:46:00.061 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:46:30.187 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51036 10 6452 1 2025-11-01 05:46:33.705 00:00:10.361 TCP 23.104.0.1:57132 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:47:30.402 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55650 10 6452 1 2025-11-01 05:47:34.110 00:00:10.323 TCP 23.104.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:42:53.957 00:05:56.623 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 05:42:53.960 00:05:56.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 05:48:30.622 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57410 10 6452 1 2025-11-01 05:48:34.469 00:00:10.363 TCP 23.104.0.1:35026 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:49:30.851 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47192 10 6452 1 2025-11-01 05:49:34.872 00:00:10.365 TCP 23.104.0.1:32878 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:50:31.089 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37628 10 6452 1 2025-11-01 05:50:35.275 00:00:10.321 TCP 23.104.0.1:49478 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:51:00.241 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:51:00.054 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 05:51:31.261 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44956 10 6452 1 2025-11-01 05:51:35.635 00:00:10.326 TCP 23.104.0.1:53686 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:52:31.483 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39820 10 6452 1 2025-11-01 05:52:35.997 00:00:10.368 TCP 23.104.0.1:41250 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:53:31.711 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55668 10 6452 1 2025-11-01 05:53:36.400 00:00:10.324 TCP 23.104.0.1:60670 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:48:53.963 00:05:56.615 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 05:48:53.961 00:05:56.620 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 05:54:31.925 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:50270 10 6452 1 2025-11-01 05:54:36.762 00:00:10.382 TCP 23.104.0.1:54936 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:55:32.126 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52538 10 6452 1 2025-11-01 05:55:37.182 00:00:10.368 TCP 23.104.0.1:57788 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:56:00.337 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 05:56:00.328 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 05:56:32.339 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35016 10 6452 1 2025-11-01 05:56:37.583 00:00:10.365 TCP 23.104.0.1:43782 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:57:32.570 00:00:10.752 TCP 1.101.0.1:3000 -> 22.102.0.1:46418 10 6452 1 2025-11-01 05:57:37.991 00:00:10.366 TCP 23.104.0.1:57880 -> 1.101.0.1:3000 11 1507 1 2025-11-01 05:58:33.355 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38748 10 6452 1 2025-11-01 05:58:38.395 00:00:10.362 TCP 23.104.0.1:57148 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507384, total packets: 1591, avg bps: 1058, avg pps: 0, avg bpp: 318 Time window: 2025-11-01 04:54:53 - 2025-11-01 05:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0018s Wall: 0.0048s flows/second: 34259.7 Runtime: 0.0048s